luser/whatthetrain — pull request #7 by Qeole (2014-12-19 16:48:49+00:00)
Title: Enforce HTTPS for milestone files to fix issue #4

This seems to fix issue #4 (see also comment on the issue).
But it would enforce the use of HTTPS for all users to get the milestones, I don't know if this is something you want.